Extracted

• • Target

    27c3550c5c649058f2db86d31be7877dd27a9d52bf7cd6dd5f3c3ceda6f67cf4

  • Size

    673KB

  • MD5

    517df0b840b6d6ba53436f50f873543c

  • SHA1

    a216e4aefb131ef1286a1d40b29aa5fde2603b42

  • SHA256

    27c3550c5c649058f2db86d31be7877dd27a9d52bf7cd6dd5f3c3ceda6f67cf4

  • SHA512

    c98761657764e69f8b376b1376158ac0c0627ec2bfd011b4e7d1681594c152be3e460eec490a17d64bdca631bb3c2e6a6f8d42e4df24ac32c566bf7bab7c5bd1

  • SSDEEP

    12288:qMrQy907f5EsBLklWvK10it4jLb6XBII8eYmaLqML5NZDBRW:GyOEp5t4j31maGMFn1I

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1